Last updated: 5 August 2026
This privacy policy replaces the previous versions at upgrid.ch/privacy-policy and upgrid.ch/terms-conditions#data.
The controller responsible for processing personal data is:
UpGrid AG Soodring 13, 8134 Adliswil, Switzerland info@upgrid.ch · +41 44 505 50 00
This policy applies to our website upgrid.ch, the platform at app.upgrid.ch, and the services we provide in connection with local electricity communities (LEG), self-consumption associations (ZEV/vZEV), and energy communities.
Our role differs depending on the community. When we operate an energy community ourselves and conclude the participation agreement in our own name, we are responsible for processing personal data; this policy then applies. When the community is operated by a grid operator, energy supplier, municipality, or other operator and we merely provide our platform to them, we act as a processor on their instructions. The respective operator is then responsible, and its privacy policy applies; in that case our processing is governed by the data processing agreement between the operator and UpGrid AG. Who is responsible for your community is set out in your participation agreement; on request we will tell you.
The same applies to partner, white-label, and cooperation solutions: when the platform appears under a partner's or customer's brand or they use it for their own use cases, the respective partner or customer is the controller and their privacy policy applies; our processing is governed by the data processing agreement between them and UpGrid AG. UpGrid acts solely on instruction in those cases and is not the controller for that processing; this policy does not apply to it. It remains applicable for use of our own website and our own communications.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP).
We process the personal data required to provide our services. This includes in particular identification and contact data, address and property data, information on generation assets, metering point and meter data, contract, billing and payment data, communication data, and technical and usage data arising when you use our website and platform.
Consent is not required for these processing activities.
Operating an energy community requires exchanging master and meter data with the distribution grid operator and electricity suppliers. Data may also be disclosed to authorities and public bodies where required by law. These recipients process data as independent controllers; their privacy policies apply to their processing.
Where necessary for visualisation or other purposes of operating the energy community, in particular billing between electricity producers and consumers, we disclose the necessary information to the participating members (for example, name and address).
We use service providers who process personal data on our behalf and according to our instructions. The service providers used are listed in section 5.
The listed service providers in turn engage their own subprocessors, in particular data centre, infrastructure, network and delivery service providers, and may process personal data at additional locations, including outside Switzerland. These further subprocessor relationships may change at any time; we do not list them individually.
By using our platform you acknowledge that processing personal data along such chains of subprocessor relationships is inherent in the use of any market-standard software solution. We are not individually aware of the contractual bases used by individual service providers and their subprocessors, and we do not review them. We accept no liability for the conduct of our service providers or their subprocessors, for their data processing, or for damage arising therefrom, to the extent permitted by law.
For electronic contract signing and payment processing, the providers involved may process personal data partly for their own purposes as independent controllers, for example to meet their own legal obligations, for fraud prevention or to evidence signing. They present their own terms and privacy policies in the respective process, for example when signing a contract or making a payment. The respective provider is responsible for that processing, not UpGrid.
By using these services you acknowledge that those providers' terms and privacy policies differ from ours, may contain their own choice-of-law and jurisdiction clauses, and that you can and should review them in the respective process. We accept no liability for their content, compliance or changes, or for damage from processing by those providers, to the extent permitted by law.
We also disclose data where we are legally obliged to do so, to protect our rights, and in the context of corporate transactions such as a merger or acquisition.
| Service | Purpose | Legal entity and country of seat | Processing location, where selectable, non-exhaustive |
|---|---|---|---|
| Vercel | Hosting and delivery of website and platform | Vercel Inc., USA | EU; logs and operational data partly elsewhere |
| Supabase | Database, authentication, file storage (contract documents, invoices) | Supabase Inc., USA / Supabase Pte. Ltd., Singapore | EU |
| Resend | Sending transactional emails (registration, contract delivery, one-time codes) | Plus Five Five, Inc., USA | USA |
| Postmark | Sending transactional emails | ActiveCampaign, LLC, USA | USA |
| Brevo | Email marketing, communication automation and contact data synchronisation | Brevo SAS (formerly Sendinblue), France | EU |
| eSignatures.com | Electronic signing of participation agreements, sending signature invitations by email and SMS | Galamian Pty Ltd, Australia | EU; delivery, logging and further processing partly elsewhere |
| Stripe | Payment processing for energy invoices | Stripe Payments Europe Ltd., Ireland; group seat USA | EU / USA |
| bexio | Accounting and bookkeeping | bexio AG, Switzerland | Switzerland / EU |
| Sentry | Error and performance monitoring of the platform | Functional Software, Inc., USA | EU |
| PostHog | Product and usage analytics | PostHog, Inc., USA | EU |
| swisstopo (geo.admin.ch) | Geocoding of address data | Federal Office of Topography swisstopo, Switzerland | Switzerland / EU |
| Google Maps Platform | Geocoding of address data | Google Ireland Ltd., Ireland; group seat USA | EU / USA |
| Google Workspace | Email, calendar and file storage for our correspondence | Google Ireland Ltd., Ireland; group seat USA | EU / USA |
| Google Analytics | Web analytics [only with your consent] | Google Ireland Ltd., Ireland; group seat USA | EU / USA |
| Meta Pixel | Reach measurement and advertising on the website [only with your consent] | Meta Platforms Ireland Ltd., Ireland; group seat USA | EU / USA |
| Intercom | Support chat and customer enquiries | Intercom R&D Unlimited Company, Ireland; group seat USA | EU / USA |
| Sanity | Content management system for website content | Sanity AS, Norway | EU / EEA |
We keep this list up to date. Changes are published with a new version of this policy.
We also disclose personal data to countries outside Switzerland. Currently affected countries include EU and EEA states, the United Kingdom, the USA, Singapore and Australia.
A server location in Switzerland or the EU does not exclude access from the service provider's country of seat: personal data may be viewed there, among other things, in the context of support, maintenance and administration, and authorities in the country of seat may request access under applicable local law.
Access to personal data by our employees and by persons we engage is not limited to Switzerland. It may occur from the countries where those persons work for us, including Pakistan, the Philippines and Indonesia, in the context of development, operation, maintenance, support and administration. These persons act on our instructions and are bound by confidentiality.
For countries for which the Federal Council has determined adequate data protection, disclosure is based on that determination. This applies, for example, to the USA where the recipient is certified under the Swiss-U.S. Data Privacy Framework. In other cases we rely on safeguards provided by the relevant service providers, in particular their standard contractual clauses. We do not ourselves review or warrant their effectiveness. We accept no liability for their content, compliance or changes, to the extent permitted by law.
You may exercise the rights granted to you under the FADP. Contact info@upgrid.ch; we may request additional information to identify you.
We use cookies and similar technologies on our website and platform. You may refuse or withdraw non-essential cookies at any time via cookie settings.
In particular, the following are used:
| Service | Provider | Purpose |
|---|---|---|
| Supabase Auth (first-party cookies) | UpGrid / Supabase | Login, session management, security |
| Sentry | Functional Software, Inc., USA | Error and performance logs, incl. IP address |
| PostHog (analytics, feature flags) | PostHog, Inc., USA | Usage analytics, feature control, surveys |
| PostHog Session Replay | PostHog, Inc., USA | Session recording (page layout, mouse and click behaviour) |
| Google Tag Manager | Google Ireland Ltd. | Integration and control of the services below |
| Google Analytics | Google Ireland Ltd. | Web analytics and reach measurement |
| Google Ads / Floodlight | Google Ireland Ltd. | Conversion measurement and remarketing |
| Meta Pixel | Meta Platforms Ireland Ltd. | Reach measurement and advertising on Meta platforms |
| LinkedIn Insight Tag | LinkedIn Ireland Unlimited Company | Conversion measurement and audience building |
| Intercom | Intercom R&D Unlimited Company, Ireland | Support chat and assignment of enquiries |
Meta Pixel data is additionally forwarded via a server-side service.
We update this privacy policy when our services, the service providers used or the legal framework change. The version published on our website applies.
The German version of this privacy policy is authoritative. Versions in other languages displayed on our website are translations for ease of understanding. In case of discrepancies or contradictions, the German version applies.